Digitial Forensics and Incident Response (DFIR) Analyst

FRSecure•Edina, MN

8d•$95,000 - $125,000•Remote

About The Position

The DFIR Analyst supports clients who have experienced or suspect they may have experienced a cyberattack. The role conducts timely, high-quality incident response investigations across environments with varying levels of security maturity, including identification and containment, and advises clients on recovery and remediation to help restore normal business operations. The position combines client incident triage and casework with proactive projects such as tabletop exercises and incident response plan coaching. This is a full-time remote position available only to candidates located in the United States and in the listed states: Arizona, Colorado, Florida, Georgia, Idaho, Illinois, Kansas, Kentucky, Massachusetts, Michigan, Minnesota, Montana, North Carolina, Ohio, Pennsylvania, South Dakota, Tennessee, Texas, Washington, and Wisconsin. Candidates in Minnesota are preferred. The company's headquarters and operational business hours are in Edina, Minnesota, on Central Time. Travel is typically less than 5–10%, with occasional travel for conferences, on-site client projects, or team and company activities. Standard hours are 8:00 a.m.–5:00 p.m. in the employee's time zone, with occasional work outside those hours for client calls, projects, meetings, or other company obligations. The role participates in a one-week on-call rotation, monitoring an inbox, answering the after-hours CSIRT hotline, and performing incident triage. Periodic after-hours and weekend on-call work is required. The starting salary range is $95,000–$125,000, excluding bonuses, incentive commission, and benefits. The role is not commission-eligible. FLSA status depends on the hiring state.

Requirements

3–5 years of information security experience.
3–5 years of experience with Active Directory, systems administration, Exchange administration, Microsoft 365, and/or other cloud environments.
3–5 years of experience presenting information security concepts.
Prior experience in threat hunting and/or incident handling.
Prior experience managing EDR and/or SIEM technologies.
Experience with firewall and network-device best practices and logging.
Solid understanding of computer systems administration in large environments.
Demonstrated analytical skills to interpret data, identify trends, and ensure accuracy in deliverables.
Ability to clearly communicate complex information to diverse audiences and actively listen to understand needs and provide effective solutions.
Proven customer service skills, including the ability to build relationships, resolve issues effectively, and deliver a positive, responsive client experience.
Ability to explain highly technical topics effectively to non-technical people.
Ability to handle and work with large amounts of data.
Proficiency with Microsoft Office Suite products.
Must be located in the United States and in one of the states listed for this remote position.

Nice To Haves

GCIH, GCFA, or ECIH certification; certifications are preferred.
Minnesota-based candidates are preferred but not required.

Responsibilities

Perform forensic reviews of client systems to identify artifacts and indicators of compromise, and help identify, contain, and eradicate malware or malicious intruders.
Conduct incident-response triage, threat hunting, and case management.
Document evidence and findings and create report deliverables.
Meet with clients during planning, information sharing, and technical support stages.
Create and deliver proactive client projects, including tabletop exercises, plan coaching, and assessments.
Conduct regular client calls to consult on incident response programs.
Research developments in cyber forensics and attack methodologies and continue developing skills.
Attend and participate in regular internal meetings.
Participate in the on-call rotation, monitor incoming CSIRT requests, answer after-hours hotline calls, and perform incident triage while meeting service-level agreements and response and resolution times.
Perform periodic after-hours and weekend on-call work.

Benefits

Medical, dental, and vision insurance.
Health savings, flexible savings, and dependent care savings account options.
Life and disability insurance.
401(k) with employer match up to 4%.
Pet insurance.
Unlimited paid time off.
Paid parental leave: 6 weeks at 100% of regular straight-time weekly pay for non-birthing parents and 12 weeks at 100% for birthing parents.
11 paid holidays.
Volunteer time off.
Employee Assistance Program (EAP) and mental wellbeing support.
Flexible schedules and remote or hybrid work options.
Ongoing learning opportunities and professional development support.